monocul.us/de4dot-cex
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Remove resources with an invalid RVA

Browse Source
This commit is contained in:
de4dot 2012-07-31 10:41:20 +02:00
parent 4b2da13972
commit bb9e4cbf26
1 changed files with 13 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
de4dot.code/deobfuscators/Confuser/Deobfuscator.cs
View File

@ -276,9 +276,22 @@ namespace de4dot.code.deobfuscators.Confuser {
if (proxyCallFixerV1 != null)
proxyCallFixerV1.find();
removeInvalidResources();
startedDeobfuscating = true;
}
void removeInvalidResources() {
foreach (var rsrc in module.Resources) {
var resource = rsrc as EmbeddedResource;
if (resource == null)
continue;
if (resource.Offset != 0xFFFFFFFF)
continue;
addResourceToBeRemoved(resource, "Invalid resource");
}
}
bool hasInitializedStringDecrypter = false;
void initializeStringDecrypter() {
if (hasInitializedStringDecrypter)